Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
File: FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft (raw, json)
Hash identifier: jMTTS3r7+NYH94vJyCDIlKijWscfVipaqvXRPyZyqyA=
Subject key identifier: E5:2D:59:3D:06:76:1E:46:4A:7B:A1:00:89:1B:39:71:69:39:D1:C4
Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Certificate serial: 0195E0EB2ED6D29AD3BCCCC86738C2D0D738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
Manifest number: 0AC8
Signing time: Sat 29 Mar 2025 08:01:04 +0000
Manifest this update: Sat 29 Mar 2025 08:01:04 +0000
Manifest next update: Sun 30 Mar 2025 08:01:04 +0000
Files and hashes: 1: FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl (hash: 4CzIBSHAHhX+sbWSfiNQxS7F8Pnk3tcivDaaJ7clVxQ=)
2: XnnmqXJoOR0rO9VDsOL9RjMpoEc.roa (hash: LgD69e+nouQ5z7eZNAgfyUxJCnIL4Pp/DimPZswYsNU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:2e:d6:d2:9a:d3:bc:cc:c8:67:38:c2:d0:d7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Validity
Not Before: Mar 29 08:01:04 2025 GMT
Not After : Mar 30 08:01:04 2025 GMT
Subject: CN=e52d593d06761e464a7ba100891b39716939d1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:2e:cb:8d:3d:ee:a0:db:43:b8:f8:d8:82:
41:f2:1a:ea:85:ef:06:bc:b0:57:e7:39:7e:a8:7e:
ea:97:47:fa:0c:42:3f:98:a0:11:bd:5d:94:b1:80:
eb:06:cb:4a:c9:5b:23:6a:1c:13:f9:24:9d:de:e4:
78:c1:01:e9:2f:51:89:ab:11:45:66:9c:62:97:97:
fa:11:d6:37:43:b1:94:fe:14:7e:4c:6f:8a:9e:9e:
a1:20:a0:50:26:62:83:39:92:43:e9:2e:e2:68:ff:
2e:67:6c:48:cc:6e:48:79:12:a7:76:dd:b9:8f:53:
0e:89:6e:9c:7e:51:55:e2:79:d7:84:d8:68:b7:1c:
44:2c:23:04:91:6e:97:fd:7b:bd:80:4e:3e:44:f4:
c3:ae:aa:8c:e9:db:d3:f0:8c:c6:7d:64:c6:56:12:
f9:fd:d7:2f:be:ed:0e:b0:b8:93:8c:15:98:99:e9:
fc:71:79:82:09:ef:f5:36:e7:95:15:13:0f:6b:39:
ed:a4:ee:73:79:83:46:f6:3d:f0:4a:47:b5:21:6b:
12:b0:7c:0d:fd:5c:84:85:cd:74:8a:ff:7e:9a:81:
31:8a:a5:26:cd:78:97:47:28:84:99:1c:48:1c:c7:
98:80:74:89:f0:7c:73:7a:8f:0f:6e:33:12:1f:4d:
10:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2D:59:3D:06:76:1E:46:4A:7B:A1:00:89:1B:39:71:69:39:D1:C4
X509v3 Authority Key Identifier:
keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8d:42:30:c6:a5:2a:5d:f1:db:5f:99:37:6a:ce:1b:61:cc:
04:da:f1:91:f5:eb:e9:9d:ea:1f:22:8e:26:24:72:12:68:7f:
b6:5a:cb:10:7f:29:4d:6c:87:e0:4f:cb:7e:15:66:b1:89:b4:
dd:c1:0b:3d:ff:95:f8:e6:63:12:8f:af:3f:d5:8f:42:c3:e9:
db:77:92:f7:e5:ad:b3:bd:61:fd:da:d4:f2:29:06:b5:46:25:
c2:a6:9f:5f:b6:1f:6f:38:c2:20:6e:0e:19:2e:a6:30:6a:f1:
35:f9:3c:af:fb:9d:52:5b:31:94:f1:05:e8:ca:0f:90:8a:10:
ff:ec:63:a5:01:42:ae:3f:34:12:33:0f:cb:75:54:32:f7:6c:
55:e2:a0:94:b3:fd:8c:14:13:0c:eb:0b:4d:0a:d6:7f:8a:d9:
d8:c7:ec:0d:9f:8d:97:ef:a3:fc:9a:50:61:85:9e:01:ff:99:
cd:30:a7:e0:c4:9c:55:09:16:f5:61:89:f6:29:26:57:5d:51:
66:97:50:04:54:ad:0c:3e:ae:73:9a:10:f5:55:57:dd:bd:e2:
9d:f3:a1:7e:7f:23:40:c9:71:0d:c1:27:95:65:55:99:d0:db:
e1:4b:56:ea:02:ef:21:e2:32:f2:98:34:23:10:ef:e2:28:a0:
11:cd:b8:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXg6y7W0prTvMzIZzjC0Nc4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZDY5MjdiNWE3NWI3NjY5YjFmZTJhYzhmZGM3YjYxMzc3
YzkxMDEwHhcNMjUwMzI5MDgwMTA0WhcNMjUwMzMwMDgwMTA0WjAzMTEwLwYDVQQD
EyhlNTJkNTkzZDA2NzYxZTQ2NGE3YmExMDA4OTFiMzk3MTY5MzlkMWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr78uy4097qDbQ7j42IJB8hrqhe8G
vLBX5zl+qH7ql0f6DEI/mKARvV2UsYDrBstKyVsjahwT+SSd3uR4wQHpL1GJqxFF
Zpxil5f6EdY3Q7GU/hR+TG+Knp6hIKBQJmKDOZJD6S7iaP8uZ2xIzG5IeRKndt25
j1MOiW6cflFV4nnXhNhotxxELCMEkW6X/Xu9gE4+RPTDrqqM6dvT8IzGfWTGVhL5
/dcvvu0OsLiTjBWYmen8cXmCCe/1NueVFRMPazntpO5zeYNG9j3wSke1IWsSsHwN
/VyEhc10iv9+moExiqUmzXiXRyiEmRxIHMeYgHSJ8Hxzeo8PbjMSH00QcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUtWT0Gdh5GSnuhAIkbOXFpOdHEMB8GA1UdIwQY
MBaAFBTWkntadbdmmx/irI/ce2E3fJEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hM2Q4NWUtNDMzNS00MjVhLWIwZjYt
OGY1NGFiMTM0ZDgzLzEvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9hM2Q4NWUtNDMzNS00MjVhLWIwZjYtOGY1NGFiMTM0ZDgz
LzEvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKI1CMMal
Kl3x21+ZN2rOG2HMBNrxkfXr6Z3qHyKOJiRyEmh/tlrLEH8pTWyH4E/LfhVmsYm0
3cELPf+V+OZjEo+vP9WPQsPp23eS9+Wts71h/drU8ikGtUYlwqafX7YfbzjCIG4O
GS6mMGrxNfk8r/udUlsxlPEF6MoPkIoQ/+xjpQFCrj80EjMPy3VUMvdsVeKglLP9
jBQTDOsLTQrWf4rZ2MfsDZ+Nl++j/JpQYYWeAf+ZzTCn4MScVQkW9WGJ9ikmV11R
ZpdQBFStDD6uc5oQ9VVX3b3infOhfn8jQMlxDcEnlWVVmdDb4UtW6gLvIeIy8pg0
IxDv4iigEc24JA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 11:17:40 2025 by rpki-client